Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA8B1E221C8311F193F51C84DAE4EC9C.roa
File: BA8B1E221C8311F193F51C84DAE4EC9C.roa (raw, json)
Hash identifier: cZrFMFnHfGg6lY1TzOUjWUtGBsli8u94DuCL+tSfK/g=
Subject key identifier: 83:C8:2E:2E:06:3C:72:88:66:B0:85:60:07:B3:FA:2F:EA:25:01:42
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A3D2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA8B1E221C8311F193F51C84DAE4EC9C.roa
Signing time: Tue 10 Mar 2026 13:19:13 +0000
ROA not before: Tue 10 Mar 2026 13:19:07 +0000
ROA not after: Thu 16 Apr 2026 13:19:07 +0000
asID: 401615
IP address blocks: 45.196.218.0/23 maxlen: 24
45.196.234.0/23 maxlen: 24
45.196.234.0/24 maxlen: 24
45.196.235.0/24 maxlen: 24
45.196.238.0/23 maxlen: 24
45.196.238.0/24 maxlen: 24
45.196.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107474 (0x1a3d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 10 13:19:07 2026 GMT
Not After : Apr 16 13:19:07 2026 GMT
Subject: CN=69b01a50-3638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:15:51:ef:88:bb:c7:18:06:51:48:20:37:ca:
c9:5e:1e:64:cf:88:cf:e4:a4:40:e8:8b:d3:dd:74:
61:b9:aa:cf:9f:53:74:3a:8d:6b:7d:d4:97:be:12:
85:da:14:df:dc:b7:76:0b:67:6f:a9:01:6b:83:68:
57:f8:da:47:d2:20:9d:13:5c:c2:68:db:35:fb:af:
6d:8c:b0:7d:8e:84:d2:ea:e9:17:33:55:5e:4c:8d:
26:ea:49:98:e9:7b:4a:e1:15:e3:58:20:91:d0:a3:
fe:2e:de:85:67:85:0b:f5:cb:12:f5:e5:08:de:46:
e0:ee:e1:59:7f:7d:6b:80:75:57:b5:05:9c:ce:44:
64:29:75:83:f0:25:ef:4e:d4:05:d6:a5:be:a6:52:
17:45:22:40:32:e4:31:44:c3:e7:13:fc:a2:d8:d0:
84:b3:a4:4d:69:e9:2e:38:fd:33:8c:21:e2:ff:44:
e5:05:2e:2d:19:ab:2a:6b:9f:f9:11:31:f3:fa:76:
d3:33:a6:42:15:3b:3c:1e:2a:4a:6a:63:4d:72:cd:
d4:8b:4d:3e:85:67:c8:25:69:e6:ac:68:8f:56:ca:
20:69:97:a0:a9:f6:17:81:8e:21:09:fc:f0:c1:66:
c3:3f:46:52:27:b4:ce:d6:50:bc:ac:bf:06:0d:01:
c7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C8:2E:2E:06:3C:72:88:66:B0:85:60:07:B3:FA:2F:EA:25:01:42
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA8B1E221C8311F193F51C84DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.218.0/23
45.196.234.0/23
45.196.238.0/23
Signature Algorithm: sha256WithRSAEncryption
40:9a:ea:35:01:ab:ca:8e:0b:d6:c5:9d:14:37:6d:5a:27:ae:
ee:55:b8:5c:57:4f:12:10:55:ad:75:62:34:f7:52:79:ac:4b:
52:d4:bb:cf:7a:ff:ee:bf:e7:06:2b:49:3f:56:4f:15:2a:4d:
76:8c:49:39:7a:5b:93:50:40:dc:a2:c1:8e:98:6a:71:16:2b:
4a:e8:cb:a0:2d:23:17:08:5d:6d:3b:53:4c:10:23:b3:0a:7c:
f9:fc:28:a5:b8:9f:1d:fa:20:32:2d:6f:01:1f:2e:89:ab:59:
e4:fa:68:5e:03:91:30:9e:e4:14:fa:55:2e:de:b8:8d:88:a3:
e9:c8:23:3c:2c:67:ae:55:87:76:7b:d2:fa:a2:b6:51:ef:a4:
fd:61:a5:05:00:45:e7:fb:a2:26:23:9f:07:94:f4:b8:b1:9c:
99:ce:9c:26:67:43:b7:4d:06:a1:3f:75:4f:9b:1c:f8:08:94:
e0:65:16:5c:ed:39:41:f0:bf:bf:f6:1b:ac:28:a0:61:b8:03:
42:ff:bb:d4:e5:68:db:66:17:2a:1d:a4:ec:a4:e0:d3:51:29:
b2:6c:6b:c8:db:32:3a:74:7a:7f:0e:5f:b3:f7:fb:24:28:b6:
d7:8a:1a:e6:91:0c:54:12:cc:fa:4d:99:c3:74:b2:a8:78:3d:
a5:86:69:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:10:34 2026 by rpki-client